Updated Oct-2023 Exam Materials for You to Prepare & Pass CIS-VRM Exam [Q19-Q35] : Top Exam Collection : http://blog.topexamcollection.com

NR. 19 Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?

GRC: Vendor Risk Management

GRC: Audit Management

GRC: Risk Management

GRC: Policy and Compliance Management

NR. 20 A Vendor Risk Task can be created from which of the following records?

Policy, Assessment, Vendor

Risk, Policy, Assessment

Policy, Vendor Risk issue, Assessment

Vendor Risk Issue, Assessment, Vendor

NR. 21 In order to evaluate a vendor on a recurring basis, configure a record in this table:

Repeating Surveys

Assessment Metric

Repeating Assessments

Assessment Metric Type

NR. 22 Which GRC records can be related to an Entity? (Choose three.)

Entity Types

Vendors

Risks

Politiken

Controls

NR. 23 From an Assessment record, the vendor risk assessor can click on “View Responses” to see which of the following?

Issue Responses

Email Responses

Task Responses

Assessment Responses

NR. 24 Who is able to change the password for the vendor contact? (Choose two.)

Vendor Contract Relationship Manager

sys_admin

Vendor contact via the Forgot Password link

Vendor Risk Reviewer

NR. 25 All Assessment Metrics within a Metric Category are scored, are rolled up, and get a score of.

0-5

0-100

0-20

0-10

NR. 26 What can a vendor contact do in the Vendor Portal? (Choose four.)

Update answers to returned questionnaires

Communicate or share information with other vendors of the assessing organization

Create new issues and tasks for the vendor risk assessor team

Review and respond to issues created by the assessing organization

Manage vendor contacts and task assignments within the vendor organization

Respond to assessments sent by the assessing organization

NR. 27 If clean data is not provided by the customer, what baseline solutions are available within the platform? (Choose three.)

Integration hub ETL plugin

Field normalization plugin

Service graph connector

System definition fix scripts module

System import transform map scripts

NR. 28 Which of the following is the main benefit of using the Vendor Portal?

Assessments are performed via the Vendor Portal and spreadsheets

More efficiently communicating Assessments with a single contact

Assessments are shared through the Vendor Portal and email

More efficiently completing Assessments via the Vendor Portal

NR. 29 What can be used to automatically assign a Vendor tier value?

A Risk Assessment

A configuration setting

A Tiering Assessment

A Vendor Tiering Rule

A Visual Task Board

NR. 30 Key data sources for Vendor Risk reporting include which of the following tables? (Choose two.)

Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]

Questionnaire Templates [asmt_metric_type]

Vendor Benchmark Scores [sn_vdr_client_score]

Survey Scores [snc_survey_scores]

Vendor Risk Issue [sn_vdr_risk_asmt_issue]

NR. 31 Which of the following is an objective of Vendor Risk Management? (Choose two.)

To help vendors improve their security posture and preparedness

To assess and manage the risk from interactions with vendors and third parties

To help negotiate the best possible price for a product or service from the vendor

To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

NR. 32 The Vendor records are stored in which table?

Company [core_company]

Department [cmn_department]

Task [task]

User [sys_user]

NR. 33 Roles preceded by sn_vdr_risk are for which scope?

GRC: Vendor Risk Remediation

GRC: Vendor Risk Core

GRC: Risk Management

GRC: Vendor Risk Management

NR. 34 A Vendor Risk Assessment that consists of a SIG Lite questionnaire and two document requests are displayed as how many total requests in the Vendor Portal?

NR. 35 On the Contact record, there is a field for the Vendor name. This is which field (with a label change) from the sys_user table?

sn_vendor

company_name

company

vendor_name

Aktualisiertes Prüfungsmaterial vom Oktober 2023 zur Vorbereitung und zum Bestehen der CIS-VRM-Prüfung [Q19-Q35]